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Amendments to the Claims: 

This listing of claims will replace all prior versions, and listing, of claims in the 

application: 

Listing of Claims: 

1 . (currently amended) In a network node, a method for performing 
cryptographic-related functions, comprising: 

executing an application program at the network node: 

receiving an input requiring cryptographic-related processing; 

generating a message via the application program based on the input, the message 

representing one of a predefined set of messages for processing by a cryptographic 

processing component located within the network node : 

transmitting the message to the cryptographic processing component; and 
performing the cryptographic-related processing by the cryptographic processing 

component . 

2. (currently amended) The method of claim 1, wherein the cryptographic-related 
processing includes at least one of: 

verifying or generating a digital signature; encrypting data; decrypting data; 
retrieving a digital certificate or certificate revocation list; verifying a certificate's 
hierarchy; self-signed certificate processing; retrieving, verifying and storing a digital 
certificate in the node; end or certificate age checking. 
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3. (currently amended) The method of claim 1 , whoroin tho nodo includ e 3 at least 
e n e application program, tho m e thod further oompri G ing: 

executing tho input via tho application program; and 
wherein the generating a message includes: 

generating th e message a function call message via the app lication program , the 
function call message representing a request for performing a predetermined 
cryptographic-related function . 

4. (currently amended) The method of claim 1, whoroin th e node inolud e s at least 
on e application program, the mothod further comprising: 

generating an output message via the application program, the output message 
requiring cryptographic-related processing; 

transmitting, based on the required cryptographic-related processing, one of the 
predefined set of messages to the cryptographic processing component; 

performing the cryptographic-related processing; and 

outputting the processed message. 

5. (currently amended) A computer-readable medium having stored thereon a 
plurality of sequences of instructions that may be invoked by a plurality of predefined 
messages, said instructions including sequences of instructions which, when executed by 
a processor, cause said processor to perform th e steps of a method comprising : 

receiving an input representing one of the predefined messages; 
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transmitting, based on the input, a function call representing a request for 
cryptographic-related processing to a cryptographic processing module executed bv the 
processor : and 

performing the cryptographic-related processing. 

6. (currently amended) The computer-readable medium of claim 5, wherein the 
performing the cryptographic-related processing includes at least one of: 

verifying or generating a digital signature; encrypting or decrypting data; 
retrieving a digital certificate or certificate revocation list; verifying a certificate's 
hierarchy; self-signed certificate processing; retrieving, verifying and storing a digital 
certificate; and or certificate age checking. 

7. (canceled) 

8. (original) The computer-readable medium of claim 5, wherein the input 
represents a digitally signed network control message requiring verification. 

9. (original) A cryptographic module, comprising: 

a memory configured to store a plurality of cryptographic processing programs, 
each program being invoked via one of a plurality of predefined messages; and 

a processor configured to: 

receive an input requiring cryptographic-related processing, 
generate one of the predefined messages based on the input, 
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transmit the message to a first one of the cryptographic processing 

programs, and 

perform the cryptographic-related processing. 

10. (currently amended) The cryptographic module of claim 9, wherein when 
performing the cryptographic-related processing, the processor is configured to perform 
at least one of: 

verifying or generating a digital signature; encrypting data; decrypting data; 
retrieving a digital certificate or certificate revocation list; verifying a certificate's 
hierarchy; self-signed certificate processing; retrieving, verifying and storing a digital 
certificate; and or certificate age checking. 

1 1. (original) The cryptographic module of claim 9, wherein when transmitting 
the message, the processor is further configured to: 

transmit a function call to the first cryptographic processing program. 

12. (original) The cryptographic module of claim 9, wherein the processor is 
further configured to: 

transmit the result of the cryptographic-related processing to an application 
program. 
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13. (original) A cryptographic module, comprising: 

means for storing a plurality of cryptographic processing programs, each program 
being invoked via one of a plurality of predefined messages; 

means for receiving an input requiring cryptographic-related processing; 

means for generating one of the predefined messages based on the input; 

means for transmitting the message to a first one of the cryptographic processing 
programs; and 

means for performing the cryptographic-related processing. 

14. (currently amended) In a node coupled to other nodes in a network, the node 
including an application program for handling communications with the other nodes, a 
method of performing cryptographic-related functions, the method comprising: 

receiving an input requiring a cryptographic-related operation; 

generating a predefined message based on the input, the message representing one 
of a plurality of predefined messages usable by a cryptographic processing program 
executed bv the node : 

transmitting the predefined message to the cryptographic processing program; and 

performing, via the cryptographic processing program, the desired cryptographic- 
related operation. 

1 5. (original) The method of claim 14, further comprising: 
returning the result of the performing to the application program. 

6 

PACE 10/22 * RCVD AT 6Q9/2004 3:29:37 PM [Eastern Daylight Time] • SVR:USPTO-€FXRF-1/1 * DNIS: 8729306 » CSID: 07271 83946 * DURATION (mm-ss): 07-30 



06/29/04 TUE 13:28 FAX 9727183946 



VERIZON IP 



@011 



Application Serial No, 09/591 ,708 
Docket No. 00-8010 

16. (currently amended) The method of claim 14, wherein the predefined 
message includes at least one of: 

a request for digital signature generation, a request for digital signature 
verification, a request for data encryption, a request for data decryption, a request for 
retrieval of a digital certificate, a request for retrieval of a certificate revocation list, a 
request for verification of a certificate's hierarchy, a request for self-signed certificate 
processing, aad or a request for certificate age checking. 

17. (currently amended) The method of claim 16, wherein the request for digital 
signature generation includes a request for at least one of RSA signature generation, 
secret keyed MD5 signature generation, elliptic curve signature generation aad or digital 
signature standard signature generation. 

18. (currently amended) The method of claim 16, wherein the request for digital 
signature verification includes a request for at least one of RSA signature verification, 
secret keyed MD5 signature verification, elliptic curve signature verification ead or 
digital signature standard signature verification. 

19. (currently amended) The method of claim 16, wherein the request for data 
encryption includes a request for at least one of RSA based encryption and or elliptic 
curve based encryption. 



PACE 11/22 * RCVD AT 6/20/2004 3:29:37 PM [Eastern Daylight Time] * SVR:USPTO-EFXRF-1/1 * DNIS: 8729306 * CSID:9727 183946 * DURATION (mm-ss): 07-30 



06/29/04 TUE 13:28 FAX 9727183946 



VERIZON IP 



@012 



Application Serial No. 09/591 1 708 
Docket No. 00-8010 

20. (currently amended) The method of claim 16, wherein the request for data 
decryption includes a request for at least one of RSA based decryption aad or elliptic 
curve based decryption. 

21. (original) The method of claim 14, wherein the performing includes: 
accessing a remote server via the network to retrieve cryptographic-related 

information. 

22. (currently amended) A computer-readable medium that stores instructions 
executable by at least one processor to perform a method for providing cryptographic- 
related functions, comprising: 

receiving a first function call from a predefined list of function calls, the 
predefined list of function calls representing available cryptographic-related functions 
executable by the at least one processor; 

generating a request message based on the first function call, the request message 
representing a request for processing by a cryptographic processing module executed by 
the at least one processor: 

transmitting the request message to the cryptographic processing module; and 

performing the cryptographic-related function. . 

23. (canceled) 
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